The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00928.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Hp Subscribe
8100c Digital Sender Subscribe
9100c Digital Sender Subscribe
9200c Digital Sender Subscribe
9250c Digital Sender Subscribe
Color Laserjet Subscribe
Color Laserjet 1500 Subscribe
Color Laserjet 2500 Subscribe
Color Laserjet 2500l Subscribe
Color Laserjet 2500lse Subscribe
Color Laserjet 2500n Subscribe
Color Laserjet 2500tn Subscribe
Color Laserjet 2605dtn Subscribe
Color Laserjet 4370mfp Subscribe
Color Laserjet 4600 Subscribe
Color Laserjet 4600dn Subscribe
Color Laserjet 4600dtn Subscribe
Color Laserjet 4600hdn Subscribe
Color Laserjet 4650 Subscribe
Color Laserjet 4700 Subscribe
Color Laserjet 4730 Mfp Subscribe
Color Laserjet 5500 Subscribe
Color Laserjet 5550 Subscribe
Color Laserjet 8500 Subscribe
Color Laserjet 8550 Subscribe
Color Laserjet 9500 Subscribe
Color Laserjet 9500 Mfp Subscribe
Color Laserjet 9500mfp Subscribe
Color Mfp Cm8050 Subscribe
Color Mfp Cm8060 Subscribe
Digital Senders Subscribe
Edgeline Printers Subscribe
Laserjet 1000 Subscribe
Laserjet 1005 Subscribe
Laserjet 1010 Subscribe
Laserjet 1012 Subscribe
Laserjet 1015 Subscribe
Laserjet 1018 Subscribe
Laserjet 1018s Subscribe
Laserjet 1020 Subscribe
Laserjet 1020 Plus Subscribe
Laserjet 1022 Subscribe
Laserjet 1022n Subscribe
Laserjet 1022nw Subscribe
Laserjet 1100 Subscribe
Laserjet 1150 Subscribe
Laserjet 1160 Subscribe
Laserjet 1200 Subscribe
Laserjet 1300 Subscribe
Laserjet 1320 Subscribe
Laserjet 2 Subscribe
Laserjet 2000 Subscribe
Laserjet 2100 Subscribe
Laserjet 2200 Subscribe
Laserjet 2200dtn Subscribe
Laserjet 2300 Subscribe
Laserjet 2300dn Subscribe
Laserjet 2400 Subscribe
Laserjet 2410 Subscribe
Laserjet 2420 Subscribe
Laserjet 2430 Subscribe
Laserjet 2500 Subscribe
Laserjet 2500c Subscribe
Laserjet 2600c Subscribe
Laserjet 2600n Subscribe
Laserjet 3000 Subscribe
Laserjet 3700 Subscribe
Laserjet 4 Subscribe
Laserjet 4000 Subscribe
Laserjet 4000n Subscribe
Laserjet 4050 Subscribe
Laserjet 4100 Subscribe
Laserjet 4100 Mfp Subscribe
Laserjet 4100mfp Subscribe
Laserjet 4200 Subscribe
Laserjet 4200dtn Subscribe
Laserjet 4200ln Subscribe
Laserjet 4240 Subscribe
Laserjet 4240n Subscribe
Laserjet 4250 Subscribe
Laserjet 4300 Subscribe
Laserjet 4345 Mfp Subscribe
Laserjet 4345mfp Subscribe
Laserjet 4350 Subscribe
Laserjet 4350dtn Subscribe
Laserjet 4650dn Subscribe
Laserjet 4\/4m Subscribe
Laserjet 4 Plus\/m Plus Subscribe
Laserjet 4l\/ml Subscribe
Laserjet 4m Plus Subscribe
Laserjet 4p\/mp Subscribe
Laserjet 4si Subscribe
Laserjet 4v\/mv Subscribe
Laserjet 5 Subscribe
Laserjet 5000 Subscribe
Laserjet 500 Plus Subscribe
Laserjet 5100 Subscribe
Laserjet 5100dtn Subscribe
Laserjet 5200 Subscribe
Laserjet 5\/m\/n Subscribe
Laserjet 5l Subscribe
Laserjet 5m Subscribe
Laserjet 5p\/mp Subscribe
Laserjet 5si Subscribe
Laserjet 8000 Subscribe
Laserjet 8100 Subscribe
Laserjet 8150 Subscribe
Laserjet 8150dn Subscribe
Laserjet 9000 Subscribe
Laserjet 9000 Mfp Subscribe
Laserjet 9000mfp Subscribe
Laserjet 9040 Subscribe
Laserjet 9040mfp Subscribe
Laserjet 9050 Subscribe
Laserjet 9050 Mfp Subscribe
Laserjet 9050mfp Subscribe
Laserjet 9055 Subscribe
Laserjet 9065 Subscribe
Laserjet 9500 Subscribe
Laserjet 9500mfp Subscribe
Laserjet Ii Subscribe
Laserjet Iid Subscribe
Laserjet Iii Subscribe
Laserjet Iiid Subscribe
Laserjet Iiip Subscribe
Laserjet Iiisi Subscribe
Laserjet Iip Subscribe
Laserjet Iip Plus Subscribe
Laserjet M1522n Mfp Subscribe
Laserjet M3027 Mfp Subscribe
Laserjet M3035 Mfp Subscribe
Laserjet M4345 Mfp Subscribe
Laserjet M5025 Mfp Subscribe
Laserjet M5035 Mfp Subscribe
Laserjet P1000 Subscribe
Laserjet P1005 Subscribe
Laserjet P1006 Subscribe
Laserjet P1007 Subscribe
Laserjet P1008 Subscribe
Laserjet P1009 Subscribe
Laserjet P1500 Subscribe
Laserjet P1505 Subscribe
Laserjet P1505n Subscribe
Laserjet P2000 Subscribe
Laserjet P2010 Subscribe
Laserjet P2015 Subscribe
Laserjet P2030 Subscribe
Laserjet P2050 Subscribe
Laserjet P3000 Subscribe
Laserjet P3005 Subscribe
Laserjet P4010 Subscribe
Laserjet P4014 Subscribe
Laserjet P4015 Subscribe
Laserjet P4500 Subscribe
Laserjet P4510 Subscribe

Configuration 1 [-]

OR cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*
cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*
cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4\/4m:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4_plus\/m_plus:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4l\/ml:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4p\/mp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4v\/mv:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5\/m\/n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5p\/mp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2009-0938 The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 cve-icon cve-icon
http://www.louhinetworks.fi/advisory/HP_20090317.txt cve-icon cve-icon
http://www.securityfocus.com/archive/1/501884/100/0/threaded cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/0754 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T04:57:17.352Z

Reserved: 2009-03-18T00:00:00

Link: CVE-2009-0941

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2009-03-18T21:00:00.390

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-0941

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses